Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oyD7hA2xT9wNg4Zr5gkzJmnErJY.roa
File: oyD7hA2xT9wNg4Zr5gkzJmnErJY.roa (raw, json)
Hash identifier: 9Ik5lNVAogXWo9T2xO9PObRHiWohYvolf6QLfsGjMHY=
Subject key identifier: A3:20:FB:84:0D:B1:4F:DC:0D:83:86:6B:E6:09:33:26:69:C4:AC:96
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01886B62ECFE0403FDCD3F700EBA1CEF48C6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oyD7hA2xT9wNg4Zr5gkzJmnErJY.roa
Signing time: Tue 30 May 2023 06:40:25 +0000
ROA not before: Tue 30 May 2023 06:40:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 91.92.24.0/24 maxlen: 24
91.92.24.0/23 maxlen: 23
91.92.25.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
193.149.28.0/22 maxlen: 22
193.149.31.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
185.221.67.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
194.180.50.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
176.125.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:62:ec:fe:04:03:fd:cd:3f:70:0e:ba:1c:ef:48:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 30 06:40:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a320fb840db14fdc0d83866be609332669c4ac96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:64:bb:ea:8c:88:0c:0f:77:d8:5b:75:32:
ef:c2:2b:ce:e7:5b:9b:f3:01:ab:d3:c9:a4:d2:fc:
31:a7:cd:66:46:8b:a2:82:7e:2f:04:e4:c3:45:80:
8f:1a:d3:1e:58:f0:9a:60:c4:79:03:d3:c0:73:e3:
93:6e:23:8f:9c:ea:0d:81:53:8e:be:5c:a8:9a:93:
d8:75:f8:c2:1f:c0:52:6c:fe:04:ab:98:4c:5e:a2:
66:86:4f:8b:b2:5f:f7:2d:72:0f:b2:6a:50:0c:d1:
c6:52:2a:7e:a8:87:d7:e5:80:ee:ab:e2:dc:f2:01:
66:b2:ea:30:05:f2:b6:19:91:fb:03:fa:d1:a1:b8:
6c:fe:0a:1f:e2:84:64:8b:a2:9b:08:59:d7:ee:ba:
c3:6d:74:b4:23:54:57:8d:e4:11:e9:99:e7:c3:83:
39:b6:4e:44:85:b6:c5:95:eb:d0:ed:82:e6:bb:cb:
1c:a6:ae:36:d4:3f:5f:41:71:5d:cf:68:74:ef:09:
e0:70:21:a5:dc:db:26:aa:cd:da:cd:04:8e:03:64:
f1:c4:3e:d9:19:12:55:30:3d:a2:e4:fa:6d:4a:1a:
82:58:92:07:63:01:c4:43:3f:7a:30:18:74:39:7b:
47:48:ac:ad:a0:98:50:1c:68:c2:76:0f:3b:96:67:
5a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:20:FB:84:0D:B1:4F:DC:0D:83:86:6B:E6:09:33:26:69:C4:AC:96
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oyD7hA2xT9wNg4Zr5gkzJmnErJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.87.0/24
91.92.24.0/23
93.123.116.0/24
171.22.19.0/24
176.125.255.0/24
185.221.67.0/24
193.149.28.0/22
194.180.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:4b:09:f2:09:7f:aa:64:63:85:7d:66:96:7b:60:60:31:14:
22:82:e9:30:59:d6:92:3f:cf:ae:aa:db:34:95:4e:b5:38:6a:
47:b3:64:44:0d:cf:bd:2b:bc:5b:e7:05:6e:5c:2d:09:12:04:
eb:a1:d0:63:3a:29:9e:23:72:4a:c7:ad:77:ac:09:7c:a7:2d:
af:ca:05:b1:d4:ac:00:57:3c:32:f0:b0:ef:84:bd:1e:2c:36:
f3:af:ac:27:14:69:07:8e:d8:e1:90:94:f8:a5:4e:ed:6e:79:
3d:6b:0e:cf:6d:aa:9e:ad:5a:8e:4f:3f:60:0e:09:af:9c:2b:
d6:e6:cd:7a:55:ab:d2:67:3b:10:75:70:a7:ae:93:e3:e3:1e:
ce:dc:df:30:c8:96:e2:72:73:6d:e1:cb:11:df:7d:7d:93:07:
f0:73:cf:56:07:09:96:7d:1d:ef:d7:eb:66:39:83:b8:1d:d7:
98:e3:5a:86:2e:bf:64:98:d1:13:26:8c:24:19:41:d3:75:7f:
dd:a4:72:d8:98:e6:6a:28:e0:05:38:81:7d:9d:7c:b2:65:4b:
e2:ec:b4:e8:32:13:3c:53:21:29:1c:35:41:8a:8d:c9:3f:9c:
a0:66:e0:b9:e2:98:4b:c5:c0:b7:0f:40:2f:b4:b8:d2:8b:12:
7f:1d:03:ae
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYhrYuz+BAP9zT9wDroc70jGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNTMwMDY0MDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzIwZmI4NDBkYjE0ZmRjMGQ4Mzg2NmJlNjA5MzMyNjY5YzRhYzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCtku+qMiAwPd9hbdTLvwivO51ub
8wGr08mk0vwxp81mRouign4vBOTDRYCPGtMeWPCaYMR5A9PAc+OTbiOPnOoNgVOO
vlyompPYdfjCH8BSbP4Eq5hMXqJmhk+Lsl/3LXIPsmpQDNHGUip+qIfX5YDuq+Lc
8gFmsuowBfK2GZH7A/rRobhs/gof4oRki6KbCFnX7rrDbXS0I1RXjeQR6Znnw4M5
tk5EhbbFlevQ7YLmu8scpq421D9fQXFdz2h07wngcCGl3Nsmqs3azQSOA2TxxD7Z
GRJVMD2i5PptShqCWJIHYwHEQz96MBh0OXtHSKytoJhQHGjCdg87lmda7QIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFKMg+4QNsU/cDYOGa+YJMyZpxKyWMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvb3lEN2hBMnhUOXdOZzRacjVna3pKbW5FckpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAV3hXAwQB
W1wYAwQAXXt0AwQAqxYTAwQAsH3/AwQAud1DAwQCwZUcAwQAwrQyMA0GCSqGSIb3
DQEBCwUAA4IBAQBLSwnyCX+qZGOFfWaWe2BgMRQigukwWdaSP8+uqts0lU61OGpH
s2REDc+9K7xb5wVuXC0JEgTrodBjOimeI3JKx613rAl8py2vygWx1KwAVzwy8LDv
hL0eLDbzr6wnFGkHjtjhkJT4pU7tbnk9aw7PbaqerVqOTz9gDgmvnCvW5s16VavS
ZzsQdXCnrpPj4x7O3N8wyJbicnNt4csR3319kwfwc89WBwmWfR3v1+tmOYO4HdeY
41qGLr9kmNETJowkGUHTdX/dpHLYmOZqKOAFOIF9nXyyZUvi7LToMhM8UyEpHDVB
io3JP5ygZuC54phLxcC3D0AvtLjSixJ/HQOu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:19 2024 by rpki-client on console-fra.rpki-client.org